Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_3600_firmware:comboam4v2_pi_1.2.0.5:*:*:*:*:*:*:*

part: o version: comboam4v2_pi_1.2.0.5 update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductRyzen 3600 Firmware (10f8ad0d-8ff9-57da-90d2-f23958e91adb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-46794 vulnerable 2026-06-08 05:38:05.999453 Details available
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service.
Published: 2023-05-09T19:01:47.728Z
Updated: 2025-01-28T15:25:54.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46792 vulnerable 2026-06-08 05:38:05.932938 Details available
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service.
Published: 2023-05-09T19:01:38.204Z
Updated: 2025-01-28T15:33:26.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46759 vulnerable 2026-06-08 05:38:04.952341 Details available
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity.
Published: 2023-05-09T19:00:53.047Z
Updated: 2025-01-27T17:34:38.069Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46754 vulnerable 2026-06-08 05:38:04.549477 Details available
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.
Published: 2023-05-09T19:00:16.712Z
Updated: 2024-08-04T05:17:42.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46753 vulnerable 2026-06-08 05:38:04.432032 Details available
Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity.
Published: 2023-05-09T19:00:04.895Z
Updated: 2025-01-28T15:41:07.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46749 vulnerable 2026-06-08 05:38:04.246282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.